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(57) Abstract: Technologies are disclosed to transfer responsibility and control over security from player makers to content au- 
thors by enabling integration of security logic and content. An exemplary optical disk (200) carries an encrypted digital video title 
combined with data processing operations (225) that implement the titles security policies and decryption processes. Player devices 
include a processing environment (e.g., a real-time virtual machine), which plays content by interpreting its processing operations. 
Players also provide procedure calls to enable content code to load data from media, perform network communications, determine 
playback environment configurations (225), access secure non-volatile storage, submit data to CODECs for output (250), and/or 
perform cryptographic operations. Content can insert forensic watermarks in decoded output for tracing pirate copies. If pirates 
compromise a player or tide, future content can be mastered with security features that, for example, block the attack, revoke pirated 
media, or use native code to correct player vulnerabilities. 
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